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APPENDIX A 

1 . (Currently Amended) A method for setting basic means of access for operation of 
devices of which the operation is controllable by electronic means, comprising: 
said devices comprising mobile phones, small computer-controlled consumer devices 
with relatively low level of computing power, computers, motor vehicles, control 
terminals for industrial processes, all of which devices may require authentication prior to 
operation, said authentication comprising temporary deactivation which adds 
authorization patterns prior to said operation ; 

establishment of a non split-kev link between a personal authentication system supplied 
with encryption data and a logic system able to control an electronic device control, said 
encryption data being stored solely in said authentication system; 

checking said encryption data in said authentication system prior to operation of said 
electronic device control; 

assignment of a plurality of predetermined means of access to said electronic device 
control associated with said authentication system, 

said predetermined means providing access to physical hardware resources and access to 

different software functions, based on the privileges of the user who identified himself to 

the system, said software function evaluates a security token and is running on top of said 

physical hardware, said predetermined means of access being dependent upon the level 

of authorization that is set in said personal authorization system; enabling of said 

predetermined means for access for said authentication system dependent on the result of 
said check. 
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2 . (Previously presented) The method defined in Claim 1, wherein said basic means 
of access to functions of said device comprise at least one of the following means: disable 
operation of said devices, enable operation of said devices, or enable configuration of 
said devices. 

3. {Previously presented) The method defined in Claim 2 wherein said link is made 
without need for intermediate software layers. 

4. (Previously presented) The method defined in Claim 3 includes in addition, the 
step of reading at least one of the following features embodied within said authentication 
system: firmware programs, device-specific command sequences for execution of 
specific device-specific functions, cryptographic keys, cryptographic algorithms, and 
individual decision-making logic. 

5. (Previously presented) The method defined in claim 4 which includes 
configuration of said devices; by authorized persons, wherein after successful 
authentication, device-specific configuration data are downloaded into said devices from 
said authentication system in accordance with said authentication systems or over a 
network. 

6. (Previously presented) A device comprising the elements defined in Claim 5 for 
execution setting basic means of access for operations. 

7 . (Previously presented) An authentication system, created for authentication of a 
person or a group of people, comprising the elements defined in Claim 5. 

8. (Previously presented) The authentication system defined in Claim 7 which is 
implemented in the form of a SmartCard . 
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9. (Previously presented) A system for setting basic means of access for operation 
of devices of which the operation is controllable by electronic means, including at least 
one device and an authentication system as defined in Claim 8. 

1 0. (Previously presented) A computer program, containing program code areas for 
the execution or preparation for execution of the steps of the method in accordance with 
Claim 4 3 when said program is installed in a computer. 

1 1 . (Currently Amended) A method for setting basic means of access for operation 
of devices of which the operation is controllable by electronic means, comprising: 

said devices comprising small computer-controlled consumer devices with 
relatively low level of computing power, computers, motor vehicles, control terminals for 
industrial processes, all of which devices may require authentication prior to operation 
said auth entication comprising temporary deactivation which adds authorization patterns 
prior to said operation : 

establishment of a non split-key link between a personal authentication system supplied 
with encryption data and a logic system able to control an electronic device control, said 
encryption data being stored solely in said authentication system; 
checking said encryption data in said authentication system prior to operation of said 
electronic device control; 

assignment of a plurality of predetermined means of access to said electronic device 
control associated with said authentication system; 

said predetermined means providing access to physical hardware resources and access to 
different software functions, based on the privileges of the user who identified himself to 
the system, said software function evaluates a security token and is running on top of said 
physical hardware, said predetermined means of access being dependent upon the 
level of authorization that is set in said personal authorization system; 
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enabling of said means for access predetermined for said authentication system 
dependent on the result of said check. 
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